Level up your

IT Security Skills

Master cybersecurity with expert-led online tutorials designed to help IT Security Engineers grow and advance

Below you can find our most recent YouTube videos

Your GlobalProtect portal and gateway are open to the internet 24/7, and the last few years brought a lot of serious CVEs hitting exactly those parts. Until now, the only fix was to upgrade PAN-OS and reboot, usually in a hurry. PAN-OS Shield changes that. In this video I show you what it is, how to turn it on, and how it protects your firewall by blocking known attacks before they reach the management plane. The protection comes through content updates and installs automatically, so you're covered against new threats right away, and you can plan your real upgrades without panic. What you'll learn: • What PAN-OS Shield is and what it protects • How to enable it (requires PAN-OS 12.2.2 or later) • How it stops exploits at the data plane • How to check what it's catching in the threat logs Note: PAN-OS Shield only protects firewalls running a GlobalProtect portal or gateway. Turning it on the first time needs a reboot. After that, new signatures arrive through content updates. 🌐 USEFUL LINKS NETSums Resources: https://netsums.com/resources GlobalProtect Configuration Step by Step: https://youtu.be/jonUROUSn-U Join the community for FREE: https://netsums.com/join 👍 LIKE, SHARE AND SUBSCRIBE FOR MORE If you enjoyed getting to know me, give this video a thumbs up, share it with your colleagues, and subscribe for more in-depth tutorials on network security and Palo Alto Networks. 🔗 CONNECT WITH US Questions, suggestions, or feedback? Drop a comment below — I'll reply as soon as I can. And let me know what topics you'd like me to cover next! #PaloAlto #NetworkSecurity #paloaltonetworks #firewall #networkengineer #cybersecurity #globalprotect
PAN-OS Shield: Stop CVEs Without Rebooting Your Firewall
Configuring DHCP on a Palo Alto firewall looks like a two-minute job until the clients do not get an address. In this video I build a working DHCP server, then a working DHCP relay, and I show the typical configuration mistakes. Covered: what auto mode actually does, ping before allocation, lease types, IP pools and MAC reservations, the DHCP options tab including inheritance from your WAN interface and custom options like 150 for IP phones, then relay configuration and the reason it must sit on the client-facing interface. 🌐 USEFUL LINKS NETSums Resources: https://netsums.com/resources Join the community for FREE: https://netsums.com/join 👍 LIKE, SHARE AND SUBSCRIBE FOR MORE If you enjoyed getting to know me, give this video a thumbs up, share it with your colleagues, and subscribe for more in-depth tutorials on network security and Palo Alto Networks. 🔗 CONNECT WITH US Questions, suggestions, or feedback? Drop a comment below — I'll reply as soon as I can. And let me know what topics you'd like me to cover next! #PaloAlto #NetworkSecurity #paloaltonetworks #firewall #networkengineer #cybersecurity
Palo Alto Firewall DHCP Explained (Server, Relay, Options and Reservations)
An authentication sequence lets a Palo Alto firewall try several authentication profiles in order until one of them authenticates the user. In this video I build a sequence from LDAP, RADIUS and local, then test users from each. I cover the "use domain to determine authentication profile" option and why it makes logins noticeably faster, how per-profile allow lists cause failures that look exactly like a wrong password in the logs, and the timeout trap that makes GlobalProtect logins fail intermittently. Finishes with the test authentication CLI command, which show you which profile matches the authentication. 🌐 USEFUL LINKS NETSums Resources: https://netsums.com/resources Join the community for FREE: https://netsums.com/join 👍 LIKE, SHARE AND SUBSCRIBE FOR MORE If you enjoyed getting to know me, give this video a thumbs up, share it with your colleagues, and subscribe for more in-depth tutorials on network security and Palo Alto Networks. 🔗 CONNECT WITH US Questions, suggestions, or feedback? Drop a comment below — I'll reply as soon as I can. And let me know what topics you'd like me to cover next! #PaloAlto #NetworkSecurity #paloaltonetworks #firewall #networkengineer #cybersecurity
Using Several Auth Profiles for One User Login
Subscribe